Mercurial > hg
comparison tests/test-highlight.t @ 37829:2ead51dcde71 stable
paper: don't register click handlers with inline javascript (issue5812)
The use of inline href="javascript:" undermines CSP policies that
don't allow inline javascript.
This commit changes the registering of the diffstat and line wrapping
toggle handlers to the the global DOMContentLoaded handler, thus
eliminating all inline javascript from the paper template.
Differential Revision: https://phab.mercurial-scm.org/D3437
author | Gregory Szorc <gregory.szorc@gmail.com> |
---|---|
date | Wed, 02 May 2018 19:16:01 -0700 |
parents | a1de4ffaa7a8 |
children | 82ae4f471254 |
comparison
equal
deleted
inserted
replaced
37828:3e3acf5d6a07 | 37829:2ead51dcde71 |
---|---|
144 <td class="author"></td> | 144 <td class="author"></td> |
145 </tr> | 145 </tr> |
146 </table> | 146 </table> |
147 | 147 |
148 <div class="overflow"> | 148 <div class="overflow"> |
149 <div class="sourcefirst linewraptoggle">line wrap: <a class="linewraplink" href="javascript:toggleLinewrap()">on</a></div> | 149 <div class="sourcefirst linewraptoggle">line wrap: <a class="linewraplink">on</a></div> |
150 <div class="sourcefirst"> line source</div> | 150 <div class="sourcefirst"> line source</div> |
151 <pre class="sourcelines stripes4 wrap bottomline" | 151 <pre class="sourcelines stripes4 wrap bottomline" |
152 data-logurl="/log/tip/primes.py" | 152 data-logurl="/log/tip/primes.py" |
153 data-selectabletag="SPAN" | 153 data-selectabletag="SPAN" |
154 data-ishead="1"> | 154 data-ishead="1"> |